Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: 0LwZbk+RRLKhbqSKM0T15NBio2pzAier1kBViXFCRB0=
Subject key identifier: 87:30:9E:DF:DF:1D:8B:7D:10:ED:A0:74:FC:BA:92:68:9A:38:2B:B6
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 0197C3B717986A83E1737B455235B7D59588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 02:00:45 +0000
Manifest this update: Tue 01 Jul 2025 02:00:45 +0000
Manifest next update: Wed 02 Jul 2025 02:00:45 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: Hhyjg76xuCLdp0TZhQffMTA3p/l74JMjUVhxQPpeeio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:17:98:6a:83:e1:73:7b:45:52:35:b7:d5:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Jul 1 02:00:45 2025 GMT
Not After : Jul 2 02:00:45 2025 GMT
Subject: CN=87309edfdf1d8b7d10eda074fcba92689a382bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5c:f8:f6:eb:40:47:61:50:53:7b:98:99:71:
37:69:17:e0:77:c9:ca:6b:f0:bd:08:5a:b9:e0:fa:
d2:c3:da:25:f2:d0:4c:bd:3d:f1:5a:eb:a8:ae:8b:
ac:24:b8:cb:a6:f9:ac:fb:d9:a6:a0:fd:a2:b6:c9:
d4:09:f9:73:f0:59:c8:f1:fa:2a:98:e6:04:e7:a4:
fa:ff:6d:61:d4:8a:cd:67:19:08:88:7d:10:0b:ed:
70:0c:66:97:d2:e5:61:16:b5:ad:b9:d9:d7:54:51:
d1:ce:2a:f1:06:e4:d2:cf:bb:3b:0b:6e:21:03:aa:
58:32:35:ef:3d:7e:63:3c:56:33:ec:86:7e:40:81:
6d:75:be:57:06:4f:79:93:f6:30:59:2d:0f:3f:f8:
56:a9:58:d9:f6:fc:5c:e4:db:a1:db:00:b7:61:5b:
23:ce:02:10:2d:8d:43:66:da:6f:f4:6a:1b:a3:c2:
c6:d9:f7:c4:dc:40:a5:ba:58:22:2a:b9:ba:0e:25:
18:bd:3e:43:20:bb:2f:4e:a3:eb:e5:90:54:15:2b:
7b:25:3a:c2:c1:4d:cd:83:82:86:a5:93:da:6a:72:
85:08:2e:ad:91:ae:2f:f8:3a:bd:c6:6f:0b:be:1e:
f7:2f:4a:d8:3c:f3:f0:8a:ae:ee:f3:d8:47:1b:69:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:9E:DF:DF:1D:8B:7D:10:ED:A0:74:FC:BA:92:68:9A:38:2B:B6
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fb:5c:a0:3f:62:84:2c:f3:03:b3:4e:17:fe:2f:a0:a6:82:
27:97:bd:14:23:fd:21:67:9f:69:ca:60:1a:a9:72:86:32:90:
31:51:13:84:0f:5b:de:b5:55:19:04:b7:94:45:23:b9:43:c0:
aa:ed:1f:04:35:44:cf:b1:63:4f:b6:56:8c:0a:a6:34:7a:cd:
b1:80:0c:87:6a:2a:eb:f6:b0:42:82:6d:74:94:ba:9c:a5:24:
9c:e6:ac:90:f2:dc:0c:29:bf:96:79:c5:af:73:f9:23:39:41:
d2:16:3f:4e:aa:e6:1a:35:39:47:69:a9:a6:08:a7:08:56:49:
e3:82:f7:08:a0:7d:c9:92:e5:c6:5d:ae:47:3c:2b:0c:7b:80:
39:42:29:70:e4:65:63:c3:55:15:74:a2:37:21:52:72:3b:9a:
16:1f:6c:44:0a:1c:77:f9:0d:c4:84:ca:73:2f:6a:de:eb:9b:
76:a4:28:ec:cb:44:cc:cd:e1:16:53:a7:0c:85:a2:f7:72:27:
26:c0:49:17:1e:02:e5:b3:4e:04:54:92:cc:0b:d6:16:c6:c1:
e3:bf:a2:ef:6b:e4:9c:c9:31:2a:6f:68:f1:31:94:76:eb:60:
c6:63:62:96:68:8a:05:64:2a:60:96:72:0c:6b:15:b9:5b:61:
ff:32:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:51:33 2025 by rpki-client